This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa File: 1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa (raw, json) Hash identifier: /UHbAWZkwPjrqgnVqWgrTchojit0XWT8TQ+LY6IFuyU= Subject key identifier: F9:DE:0B:EA:17:2F:7E:F5:52:26:3D:9A:97:AC:7C:8B:EE:BE:02:2C Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A3167A3392662F8491CB6F8BF7F6A0 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 212.113.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:16:7a:33:92:66:2f:84:91:cb:6f:8b:f7:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9de0bea172f7ef552263d9a97ac7c8beebe022c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d8:9a:66:f7:8a:94:bb:98:84:3f:e0:fe:22: f4:b8:b9:cf:e3:0b:88:d6:a5:e1:d5:e0:78:01:e7: 0c:6a:86:07:76:c9:55:1e:da:f3:46:fe:17:c3:f3: 51:0c:a0:ba:26:52:01:13:d9:f9:3a:a7:5f:64:06: 56:55:be:1c:63:21:38:1c:be:33:d6:6a:58:8b:b5: f1:27:60:53:35:eb:c8:23:ee:37:2e:e9:5c:b5:39: 86:16:ad:7a:6a:bf:18:05:c9:58:13:e1:62:4d:6b: 47:7c:70:76:96:41:38:be:33:12:b5:d6:f5:55:f7: 58:b6:de:91:2b:6f:4f:fb:94:c4:4e:46:05:8a:91: ce:80:6f:24:c3:91:88:90:5c:23:97:23:47:96:4f: 34:e5:c9:b4:65:61:79:84:65:eb:4a:77:0a:81:28: 53:e8:66:7d:88:c1:fb:48:80:bd:7a:a4:80:ee:44: 23:19:32:51:f0:dd:25:e0:f0:9c:29:da:37:e8:85: c2:2c:e1:95:1d:1d:c5:cd:27:d5:3b:46:03:2a:9b: d1:e2:cf:02:56:18:3f:0e:f8:8e:a8:56:73:e1:b4: 5b:eb:76:32:cb:00:bb:02:1f:a2:b0:84:52:72:c7: bb:c9:59:56:b7:ae:d7:d7:cc:b4:af:fd:a5:b8:db: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DE:0B:EA:17:2F:7E:F5:52:26:3D:9A:97:AC:7C:8B:EE:BE:02:2C X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/1-d4L6hcvfvVSJj2al6x8i-6-Aiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.100.0/22 Signature Algorithm: sha256WithRSAEncryption 09:90:56:27:b9:0e:e9:b0:69:65:2f:ab:ed:4a:32:bf:c4:98: e0:c3:99:1e:22:3d:64:1b:dc:4c:60:71:35:af:a5:b9:16:a4: f4:18:a1:cb:b2:c5:e6:83:cb:50:23:7d:2e:b6:3e:f2:57:b6: 70:5d:48:29:83:58:e7:ea:be:73:2b:74:d5:e9:64:90:20:3a: b8:33:d4:2c:96:f1:95:8f:cb:87:c1:74:98:ce:d1:13:69:66: 33:5d:b7:df:73:ae:7b:39:49:56:ef:30:7b:9d:03:82:bd:25: e1:48:20:93:83:a0:af:fc:bf:4c:15:c4:fb:8b:d0:19:58:5b: 1e:69:14:78:cd:ee:8e:4a:e9:25:35:79:f9:4e:b4:c7:a6:20: 81:a5:51:a1:95:a0:04:1f:8a:04:31:48:60:22:b6:d8:5b:53: 56:78:5e:2e:23:cc:63:8f:e2:19:2d:7a:30:ce:74:e5:d8:ea: 01:05:9d:61:f1:5d:3c:4b:61:48:7a:25:d5:4c:a3:ce:ae:93: f2:2d:df:a6:42:ca:6d:4d:41:61:1b:2d:86:11:9c:76:5e:23: ae:90:ae:4d:5e:c1:75:a4:d7:44:ff:7d:05:8b:02:c0:af:ba: 68:04:c5:ed:c0:09:2d:68:ac:89:10:c7:a8:c6:d3:87:dd:3d: e6:2c:2c:96 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4oxZ6M5JmL4SRy2+L9/agMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWRlMGJlYTE3MmY3ZWY1NTIyNjNkOWE5N2FjN2M4YmVlYmUwMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NiaZveKlLuYhD/g/iL0uLnP4wuI 1qXh1eB4AecMaoYHdslVHtrzRv4Xw/NRDKC6JlIBE9n5OqdfZAZWVb4cYyE4HL4z 1mpYi7XxJ2BTNevII+43LulctTmGFq16ar8YBclYE+FiTWtHfHB2lkE4vjMStdb1 VfdYtt6RK29P+5TETkYFipHOgG8kw5GIkFwjlyNHlk805cm0ZWF5hGXrSncKgShT 6GZ9iMH7SIC9eqSA7kQjGTJR8N0l4PCcKdo36IXCLOGVHR3FzSfVO0YDKpvR4s8C Vhg/DviOqFZz4bRb63YyywC7Ah+isIRScse7yVlWt67X18y0r/2luNvsswIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPneC+oXL371UiY9mpesfIvuvgIsMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvMS1kNEw2aGN2ZnZWU0pqMmFsNng4aS02LUFpdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzEvM2QzYTJkLWEwMzktNDZmNC04Njg3LTA1NzgxN2JhOWZi Ny8xL0JNdmx0R0k5cTBMeFdwQlFBdHQ4NWk2RlR5ay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtRxZDAN BgkqhkiG9w0BAQsFAAOCAQEACZBWJ7kO6bBpZS+r7Uoyv8SY4MOZHiI9ZBvcTGBx Na+luRak9Bihy7LF5oPLUCN9LrY+8le2cF1IKYNY5+q+cyt01elkkCA6uDPULJbx lY/Lh8F0mM7RE2lmM12333OuezlJVu8we50Dgr0l4Uggk4Ogr/y/TBXE+4vQGVhb HmkUeM3ujkrpJTV5+U60x6YggaVRoZWgBB+KBDFIYCK22FtTVnheLiPMY4/iGS16 MM505djqAQWdYfFdPEthSHol1Uyjzq6T8i3fpkLKbU1BYRsthhGcdl4jrpCuTV7B daTXRP99BYsCwK+6aATF7cAJLWisiRDHqMbTh9095iwslg== -----END CERTIFICATE-----Generated at Mon Jan 19 18:03:50 2026 by rpki-client